NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
837ab4708c
kumquat-buildroot/package/expat/expat.hash

8 lines
387 B
Plaintext
Raw Normal View History

package/expat: security bump to version 2.5.0 Expat 2.5.0 has been released earlier today. Most importantly, this release fixes CVE-2022-43680: a heap use-after-free vulnerability after overeager destruction of a shared DTD in function XML_ExternalEntityParserCreate in out-of-memory situations, with expected impact of denial of service or potentially arbitrary code execution. https://blog.hartwork.org/posts/expat-2-5-0-released https://github.com/libexpat/libexpat/blob/R_2_5_0/expat/Changes Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-26 21:36:58 +02:00
# From https://sourceforge.net/projects/expat/files/expat/2.5.0/
md5 ac6677b6d1b95d209ab697ce8b688704 expat-2.5.0.tar.xz
sha1 5178e13c1e34f4643d5118d5758babfe0e836fe2 expat-2.5.0.tar.xz
expat: bump to 2.2.5 Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-11-20 16:18:40 +01:00
expat: bump to version 2.2.4 Upstream migrated to automake for autotools: the "installlib" target no longer exist, and we can use the standard "install" target, and therefore drop the special INSTALL_STAGING_OPTS and INSTALL_TARGET_OPTS variables. Add license hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-09-04 18:51:07 +02:00
# Locally calculated
package/expat: security bump to version 2.5.0 Expat 2.5.0 has been released earlier today. Most importantly, this release fixes CVE-2022-43680: a heap use-after-free vulnerability after overeager destruction of a shared DTD in function XML_ExternalEntityParserCreate in out-of-memory situations, with expected impact of denial of service or potentially arbitrary code execution. https://blog.hartwork.org/posts/expat-2-5-0-released https://github.com/libexpat/libexpat/blob/R_2_5_0/expat/Changes Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-26 21:36:58 +02:00
sha256 ef2420f0232c087801abf705e89ae65f6257df6b7931d37846a193ef2e8cdcbe expat-2.5.0.tar.xz
package/expat: bump to version 2.4.9 - Drop patch (akready in version) - Update hash of COPYING (year updated with https://github.com/libexpat/libexpat/commit/39b2e99355039626438d48a4eca6aacba2b44d5e) https://blog.hartwork.org/posts/expat-2-4-9-released https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-21 23:07:33 +02:00
sha256 122f2c27000472a201d337b9b31f7eb2b52d091b02857061a8880371612d9534 COPYING
Reference in New Issue Copy Permalink